J. Michael Pitale 
24 Shannon Court 
Medford, NJ 08055 
February 22, 2000 



Assistant Commissioner 
For Patents 

Washington, DC 20231 



Dear Examiner, 



The following is a listing of the enclosed documents pertaining to the computer 
procedure/program entitled ATM/ ALERT: 



A - Title, description and background 
B - Schematic diagram/flowchart 
C - Paper copy of program in Assembler language 
D - Paper copy of program in COBOL language 
E - Actual computer listing Assembler language 
F - Actual computer listing COBOL language 
G - Microfiche listing of 'E' above 
H - Microfiche listing of F above 



- Cover Page plus 3 pages 

- One page 

- 3 pages 

- 3 pages 

- 6 pages 

- 10 pages 

- One sheet 

- One sheet 



I hope this information will help in the review process. 



Also I am a senior citizen on disability who has to minimize costs, so I am filing this without an 
attorney. If there are any omissions or corrections, please advise and I will immediately respond. 



Sincerely, 




Phone - (609) 654-4583 
Fax -(609)714-0868 
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For Responsii/e Action To 



ATM Transactions And 



Other Security Accesses 
Made Under Duress 
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INTRODUCTION 

ATM/ALERT procedure was first developed for the security access of ATM transactions which 
only used PIN numbers as the form of identification. Subsequent enhancements to ATM/ ALERT 
have made it eflfective for many different types of identification now in operation other than just 
PIN numbers. Iris Scans, Thumb Prints, Facial Scans and other methods of identification are now 
available along with PIN numbers. 

FUNCTIONS 

ATM/ALERT has two fiinctions which are as follows: 

- To recognize a valid identification which will then allow the requested action of an ATM 
transaction, access to a secured area, etc. 

and/or 

- To recognize an 'alert* signal issued by the user who is under duress which will then activate 
security measures such as a silent alarm or whatever is deemed appropriate action. In some 
circumstances, the requested ftmction could still be allowed to prevent a warning that the 
alarm has been activated. 

METHODOLOGY 

The methodolog y requires two types of ID*s with one a valid identification and the other for alert 
indication. These two ID's may be any two methods not necessarily the same. For example, a valid 
ID might be an IRIS Scan that could be combined with the alert signal generated by the entering 
of an alert PIN and so forth. 

Depending on the method of providing identification, the first encounter with the identification 
might be sufficient to provide a valid status... or an alert condition. For example, if two PIN 
numbers are used, one for valid status and the other for alert status, the first-time entry of a PIN 
number would be sufficient to determine if this is a valid entry or the alert entry and the second 
entry would not be needed.. 

However, perhaps the first-time entry of another method of identification, such as an Iris scan, 
might not by itself have enough ability to signal a valid/alert condition. A subsequent entry of 
another identification such as a PIN number might also be required to signal the status. A valid 
Iris scan combined with a valid PIN number would grant the requested action, while a valid Iris 
scan combined with an alert PIN number would signal the alert status. Therefore, in certain 
combinations of providing identification, an 'second ID required' indication would be part of the 
ATM/ALERT procedure. 
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SOFTWARE CODING 

ATM/ALERT has been coded in two main-frame languages, COBOL and Assembler. However, 
it is easily translated into any other media including coding for the P/C environment. 

The methodology of ATM/ALERT is to perform 'traffic control' for most of the already in-place 
computer activity. It goes back and forth with functions such acquiring the identification and 
checking for valid/alert status by the established software Then the valid/alert status indication is 
passed from the established software back to ATM/ALERT which will make the determination of 
returning control to the established function to allow the requested action or notifying the 
established software to activate the appropriate alert action. ATM/ALERT 'traffic control' 
functions could also be incorporated directly into the already established software coding with 
little effort. 

Selection of type of identification, appropriate actions and so forth are the choice of the user 
company/network and may even vary from user to user. 



EXAMPLES 

#1 - A PIN number is used for the first-time identification. It would be checked against two PIN 
numbers, one valid and the other an alert signal to determine status. If a valid number, the 
requested action is performed. If it is the alert number, perform the alert action. In this 
situation, only the first-time entry of identification would be needed.. 

#2 - An Iris Scan is used as the first ID. If there is the possibility of being able to use both the left 
and the right eye for different Iris scans, then the right eye could be used for first-time proper 
validation or the left eye used for the alert signal or vice versa. In this case, both the valid 
and the alert signals could be identified by the same method of the Iris Scan. In this situation, 
similar to example #1, only the first-time entry of identification would be needed.. 

#3 - If an Iris Scan is used for first-time identification (either eye) as validation and there is not the 
possibility of using both eyes as in the example #2 above, then the second-time entering of 
another type for valid/alert such as a PIN number which would be additional validation... OR 
would be the alert signal. This example shows the use of two different methods, an Iris Scan 
and a PIN number, for the valid/alert signal combination. In this situation, an indicator would 
be in the user profile to signal that a second-time entry is also required. 

#4 - Indication of a requirement for the need for a second ID might also be appropriate when a 
facial scan is used for first-time identification. In this situation, a second-time identification 
entry would be required. The second could be entering of a valid/alert PIN number or thumb 
print (right for valid, left for alert, or vice versa). 
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RECAP 



The above examples show just some of how the same and/or diflferent methods would be used for 
each validation. The various combinations for control of the access would be the choice of the 
particular installation, network or company and would be stored with the user's profile. And there 
could be diflferent combinations for the various users within the same installation, network, etc.. 

This methodology is applicable for ATM transactions, controlled access to secured areas, 
validation of computer logons, and all other activities that require a security access with the 
option of signalling an alert. 



Copyright 1998 - Revised 2000 - All Rights Reserved 
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tNITtATON OF 
PRDCEDURE 




'ERFORM REQUEST EcjO 
ACTONS 




PERFORM NORMAL 
CUOSINS ROUTINE 
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Initialed by : Insertion of ATM card 

Pressing a 'start' button/key 
Approach an 'entry zone.... etc. 



10 entered by 'PIN' number, IRIS scan, 
thumb print.. .etc 

Valid ID? Recognizable as belonging 
to an individual? Both 'good' ID or 
'alert' must pass this test.. or re-enter ID 

ALERT ID signals the performance of 
the alarm procedures..probable silent. 
Then the normal procedures must be 
performed to give appearance of 
'normal' conditions. 



Second ID check switch is 'ON' at first 
and second ID switch requied is 
indicated in user profile. If needed, 
switch is turned 'off to allow for further 
check and additional ID entry is 
requested. 

Perform requested action.. ATM 
transaction, Security door entry, etc. 

In some types of requested actions, a 
second request is valid. ..Such as 
another ATM transaction, etc. 

Perform associated closing actions 
such as an audit log recording, 
security log entry, etc. 



# 



ATMALERT CSECT 
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* COPYRIGHT 1998 ALL RIGHTS RESERVED. JMP ASSOCL\TES 

* ATM/ALERT IS A PROCEDURE THAT HAS TWO FUNCTIONS: 

* 1 - TO RECOGNIZE A VALID IDENTIFICATION WHICH WILL 

* ALLOW THE REQUESTED ACTION SUCH AS AN ATM 

* TRANSACTION OR ACCESS TO A SECURITY AREA 

* AND/OR 

* 2 - TO RECOGNIZE AN 'ALERT SIGNAL ISSUSED BY THE USER 

* WHO IS UNDER DURESS. THIS WILL THEN ACTIVATE 

* SECURITY MEASURES SUCH AS A SILENT ALARM OR OTHER 

* APPROPRIATE MEASURES. THE REQUESTED ACTION COULD 

* ALSO BE ALLOWED TO PREVENT A WARNING THAT THE 

* ALARM HAS BEEN ACTIVATED. 

* * NOTE - THE ROUTINE 'READ-CUSTOMER-CARD' IS EXECUTED 

* IN THE STANDARD ATM PROGRAM AND THEN CONTROL 

* IS PASSED TO THIS MODULE. 

RETURNR EQU 9 
SAVE (14,12) 
BALR 12,0 
USING *,12 



BACKCHN LA S.SAVREG 
ST 13,4(5) 
ST 5,8(13) 
LR 13,5 

* NOTE - THIS CHECKIN PROCEDURE IS EXECUTED IN THE STANDARD 

* PROCESSING PROGRAM ALREADY IN USE. 

* THE ONLY CHANGES ARE TO PLACE A STATUS INDICATION 

* IN THE HOLD FIELD(PINID) AND AN INDICATIOR TO 

* INDICATE IF A SECOND ID IS REQUIRED. 

LA 1,PINID 

LA 15,PINRTN EXTERNAL REFERENCE 
BALR 14,15 



CLC PINID,=C AOKAY' 
BE DOREQST 



CLC PINID,=C'ERROR' 



# 

BE ERRORTN 

CLC PINID=C*ALERr 
BE ALERTN 

CKSECID CLC SECID,=C' 
BE DOREQST 

* STANDARD ERROR ROUTINE 
* 

ERRORTN LA 15,STDERR EXTERNAL REFERENCE 
BALR 14,15 

* 

* DO THE STANDARD REQUEST 

DOREQST MVC REQIND,=C' ' 
LA l.REQIND 

LA IS.DOREQ EXTERNAL REFERENCE 
BALR 14,15 

CLC REQIND,=C'MORE' 
BE DOREQST 

***** LM 13.4(13),12 RETRUN DOES TfflS ««««< 
FINAL RETURN (14.12),RC=0 

* ATM ALERT ROUTINES 

ALERTN LA 1 5.PICRTN PICTURE RTN - EXTERNAL REFERENCE 

BALR 14,15 

LA 15,ALARMRTN ...ALARM RTN-EXTERNAL REFERENCE 
BALR 14,15 

B DOREQST 

* CONSTANTS AND SAVE AREAS 
SAVREG DS 18F 

REQIND DC CL5" 

PINID DS CL5" 
SECID DS CLl'X 
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PINRTN DC 



V(PINRTNX) 
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PICRTN DC V(PICRTNX) 
STDERR DC V(STDERRX) 
DOREQ DC V(DOREQX) 
ALARMRTNDC V(ALARMX) 
END 





4 



ID DIVISION 
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PROGRAM-ID ATMALERT 

• REMARKS. 

• COPYRIGHT 1998 ALL RIGHT RESERVED. JMP ASSOCIATES 

• ATM/ALERT IS A PROCEDURE THAT HAS TWO FUNCTIONS: 

• 1 - TO RECOGNIZE A VALID IDENTIFICATION WHICH WILL 

• ALLOW THE REQUESTED ACTION SUCH AS AN ATM 

• TRANSACTION OR ACCESS TO A SECURITY AREA 

• AND/OR 

• 2 -TO RECOGNIZE AN 'ALERT SIGNAL ISSUED BY THE USER 

• WHO IS UNDER DURESS. THIS WILL THEN ACTIVATE 

• SECURITY MEASURES SUCH AS A SILENT ALARM OR OTHER 

• APPROPRIATE ACTION. THE REQUESTED ACTION COULD 

• ALSO BE ALLOWED TO PREVENT A WARNING THAT THE 

• ALARM HAS BEEN ACTIVATED. 

• NOTE - THIS IS AN EXAMPLE OF MOST OF THE ACTIVITY BEING 

• INITIATED BY THIS ALERT PROGRAM AND BEING 

• PERFORMED IN THE STANDARD ACCESS PROCESSING 
» PROGRAM. 

• CONVERSELY, MOST OF THE ACTIVITY CAN BE PERFORMED IN 

• THE STANDARD PROCESSING PROGRAM AND THE ALERT 

• PROCEDURES CAN BE INCORPORTED INTO THE STANDARD 

• PROGRAM. EITHER WAY, THERE IS VERY LITTLE 

• RE-PROGRAMING REQUIRED. 

ENVIRONMENT DIVISION. 



DATA DIVISION. 
WORKING-STORAGE SECTION. 
01 ID-CODE. 

02 ID-CODE-HOLD PIC XXXXX VALUE SPACES. 

02 SECOND-ID-REQ-IND PIC X VALUE SPACE. 



01 REQUEST-INDICATOR. 
02 REQUEST-INDICATOR-HOLD PIC XXXX VALUE SPACES. 



• NOTE - THIS PROCEDURE EXECUTED IN THE STANDARD 



01 SECOND-ID-REQ-SW PIC X VALUE 'X. 
PROCEDURE DIVISION. 



INITIATION-PROCEDURE. 
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• PROCESSING PROGRAM ALREADY IN USE. THUS THERE 

• IS NO MAJOR CHANGE TO THE EXISTING CODE AT THIS 

• CONTROL, CAN BE THEN BE PASSED TO THIS MODULE 

* ALSO, AFTER EACH -CALL- (PASSING CONTROL) TO THE 

♦ STANDARD PROGRAM FROM THIS MODULE, CONTROL IS 

♦ RETURNED TO THIS MODULE AFTER THE ROUTINE IS 

* COMPLETED IN THE STANDARD PROGRAM 
♦ 

ID-ENTRY-PROCEDURE. 

CALL TDVALID* USING ID-CODE-HOLD. 

* 

♦ NOTE - THIS CHECKING PROCEDURE IS EXECUTED IN THE STANDART 

♦ PROCESSING PROGRAM ALREADY IN USE. 

* THE ONLY CHANGES ARE TO PLACE A STATUS INDICATION IN 

• THE HOLD FIELD(ID.CODE) AND AN INDICATOR TO INDICATE 

* IF A SECOND ID IS REQUIRED 

♦ INDICATION ACTION 

♦ AOKAY HONOR THE CUSTOMERS REQUEST 

* ERROR ID ERROR - ENTER ID AGAIN 

• ALERT ACTIVATE THE ATM/ALERT ROUTINE 

♦ 77? NO TECOGNIZED - ENTER ID AGAIN 
* 

IF ID-CODE-HOLD IS EQUAL TO AOKAY, 
GO TO CHECK-SECOND-ID. 

* 

IF ID-CODE-HOLD IS EQUAL TO 'ERROR', 
CALL 'STANDARD-ERROR-ROUTINE'. 

IF ID-CODE-HOLD IS EQUAL TO 'ALERT. 
GOTOATM-ALERT-ROUTINE. . 
CHECK-SECOND-ID. 
IF SECOND-ID-REQ-SW IS EQUAL TO SPACE 
GO TO PERFORM-REQUESTED-ACTION. 

MOVE SPACE TO SECOND-ID-REQ-SW. 
GO TO ID-ENTRY-PROCEDURE 

PERFORM-REQUESTED-ACTION 

CALL 'REQACr USING REQUEST-INDICATOR 



* NOTE - THIS CHECKING PROCEDURE IS EXECUTED IN THE STANDARD 

* PROCESSING PROGRAM ALREADY IN USE. 
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• THE ONLY CHANGE IS TO PLACEA STATUS INDICATION IN 

♦ THE HOLD FIELD(REQUEST-INDICATOR) FOR FURTHER 

♦ CHECKING. 

♦ INDICATION ACTION 

♦ MORE CUSTOMER HAS ANOTHER REQUEST 

* NONE CUSTOMER IS DONE - END PRO(mAM 

IF REQUEST-INDICATOR-HOLD IS EQUAL TO -MORE', 
GO TO PERFORM-REQUESTED-ACTION 

ELSE 
CALL •NORCLS'. 

STOP RUN. 

• NOTE - THE ALERT ROUTINE PERFORMS SECURITY REOCEDURES 

• AND THEN CONTINUES ON WITH NORMAL PROCESSING SO AS 

• NOT TO WARN OF THE ALERT PROCEDURES. 

ATM-ALERT-ROUTINE. 
CALL TAKEPIC 

* NOTE -THIS IS OPTIONAL AND CAN BE REMOVED. MANY 

* PROCEDURES ALREADY HAVE THE PICTURE TAKING 

» PROCESS IN PLACE. NO ADDITIONAL CODING REQUIRED 

CALL'SECALRM*. 

* NOTE - THE SECURITY ALERT IS MOSTLY A PHYSICAL 

* TELEPHONE LINE TYPE CONNECTION. 

GO TO PERFORM-REQUESTED-ACTION. 



NOTE - BACK TO NORMAL TYPE PROCESSING SO AS NOT 
TO ENDANGER THE CUSTOMER. 
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